Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rFXxSrNYgLewCroTpgb_Hj1aZFQ.roa
File: rFXxSrNYgLewCroTpgb_Hj1aZFQ.roa (raw, json)
Hash identifier: +h0KG35c/VDQNxVlh8itNbx8Eep0vuM5HJjkVgmrvvY=
Subject key identifier: AC:55:F1:4A:B3:58:80:B7:B0:0A:BA:13:A6:06:FF:1E:3D:5A:64:54
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE63B9402E6A056705194983ABA8DCB
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rFXxSrNYgLewCroTpgb_Hj1aZFQ.roa
Signing time: Sun 01 Jan 2023 10:35:05 +0000
ROA not before: Sun 01 Jan 2023 10:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:3b:94:02:e6:a0:56:70:51:94:98:3a:ba:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac55f14ab35880b7b00aba13a606ff1e3d5a6454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:0b:e6:ca:27:c6:ca:b7:81:fd:ff:ae:7c:
b5:cb:63:8e:a2:ae:53:86:7e:6b:47:3c:76:2e:46:
e6:21:09:d5:c8:b1:87:85:7a:7f:f0:2b:cf:f3:5e:
af:03:ce:22:c5:b5:62:1f:ba:34:16:d9:dc:c7:1f:
73:8a:23:c1:11:2c:3b:c9:5b:8d:5b:58:8e:63:ea:
1e:eb:0f:f6:f6:d5:c5:d1:fd:87:f4:b6:ce:16:e8:
0e:b4:2d:75:b1:ff:90:7f:5a:f6:0d:05:de:aa:b0:
7c:1a:e8:c5:b8:9c:cc:9a:a0:fb:c1:f5:58:fe:c7:
b4:8e:81:1f:75:a7:6c:51:57:4b:19:c5:a7:b4:b9:
2d:55:bf:88:c4:4e:32:de:2a:87:53:c0:26:9b:ca:
49:95:58:d1:4a:43:50:5d:e1:42:ca:bc:45:36:95:
46:71:ae:84:fb:c1:24:06:77:0f:86:3d:e3:93:5f:
f5:a5:b3:b5:ce:f7:53:bf:9e:a0:54:9c:f7:b4:ed:
45:d7:99:0c:38:85:f9:2e:d7:7c:72:46:00:3d:2e:
ca:05:35:50:ec:d0:36:70:be:80:05:bc:fb:e1:37:
88:f1:fb:d0:62:58:85:5e:7f:e0:ff:25:86:26:b2:
de:56:8d:ba:0d:49:8d:6b:32:1e:21:ca:f6:8c:47:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:F1:4A:B3:58:80:B7:B0:0A:BA:13:A6:06:FF:1E:3D:5A:64:54
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rFXxSrNYgLewCroTpgb_Hj1aZFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
83.147.40.0/21
Signature Algorithm: sha256WithRSAEncryption
86:bb:39:e3:a0:32:b4:2c:2b:90:5e:6d:44:29:be:43:8e:32:
12:76:18:56:96:75:df:1a:b1:48:5f:c2:15:f9:5a:10:72:24:
25:90:68:94:72:43:0e:df:d7:9f:74:0f:4a:5c:c8:3c:3c:96:
99:40:e4:8e:d8:a0:48:e9:f9:b0:b6:e3:ef:cf:bc:a4:86:4e:
bb:dd:f5:5a:d8:6e:2a:03:09:45:19:68:ff:fb:85:09:b2:6d:
3d:20:da:ee:b8:78:c4:38:18:39:69:41:3b:87:73:f8:9c:72:
81:da:00:c0:d9:f1:e8:06:c5:16:a0:6e:e8:49:6f:9e:dc:ba:
3b:88:7d:65:b7:25:70:7e:d0:d7:98:2d:fa:b5:30:ad:03:f6:
46:10:1e:fe:57:a2:94:d0:39:e5:d5:2d:be:1c:88:5c:2d:d0:
92:84:e2:29:2e:5e:8c:d9:49:cb:c6:fb:d1:8e:60:aa:ae:85:
36:b2:5e:fe:2b:2a:70:bd:3b:cf:f9:e1:09:17:90:0d:a7:7f:
b7:e2:35:87:7e:e7:72:31:db:60:d0:e3:51:e5:92:ac:12:ba:
51:78:fa:f1:fe:a0:47:b7:50:6b:f6:f7:ee:0d:af:ca:ae:c6:
30:ec:d1:68:cf:10:e8:8b:ed:25:10:0f:ee:5e:a5:aa:8d:4d:
b8:a5:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org